arXiv: 1508.02464v2 [math.NT] 28 Mar 2016 


THE DENSITY OF PRIMES DIVIDING A PARTICULAR NON-LINEAR 

RECURRENCE SEQUENCE 

ALEXI BLOCK GORMAN, TYLER GENAO, HEESU HWANG, NOAM KANTOR, SARAH PARSONS, 

AND JEREMY ROUSE 


Abstract. Define the EGHO sequence {bn} recursively by {bo, bi,b 2 , bs) = (1,1, 2,1) and for n > 4, 

i — lbn — 3 — bn-2 


bn — 


bn—4: 

i-lbn-3 - 3b^_ 
bn —A 


if n ^ 0 (mod 3), 
if n = 0 (mod 3). 


We relate this sequence {bn} to the coordinates of points on the elliptic curve E ■. + y = — 3x + i. 

We use Galois representations attached to E to prove that the density of primes dividing a term in this 
sequence is equal to Furthermore, we describe an infinite family of elliptic curves whose Galois images 
match those of E. 


1. Introduction and Statement of Results 

Given an integer sequence, it is natural to ask which primes divide at least one term in the sequence. More 
generally, what is the density of such primes? A theorem of Hasse shows that the density of primes dividing 
numbers of form 2" -|- 1 is i|, a result that is intimately connected to a question asked by Sierpinski [5] on 
the multiplicative order of 2 in finite fields. Lagarias [7] (see the correction [8]) extended Hasse's methods 
to show that the density of primes dividing a term of the Lucas sequence is |. Hasse and Lagarias' methods 
include taking field extensions created from the characteristic polynomial of sequences and analyzing the 
resulting Galois groups, which depend entirely on the behavior of the sequence in Fp. The Ghebotarev 
Density Theorem can then be applied to these groups to calculate numerical values. 

In [5], Jones and Rouse extend this theme and employ the techniques of Galois theory to study sequences 
attached to elliptic curves. It has long been known that Galois representations attached to an elliptic curve 
encode much of the arithmetic of points on the curve. Classically, the Galois representation is constructed 
using the action of the absolute Galois group on the 7V-torsion points of the identity on the curve. In [5], 
the authors modify the classical representation to study 7V-division points of a non-identity point P. Fix 
a prime t, when the Galois group associated to the ^-division points is as large as possible, they use this 
arboreal representation to calculate the density of primes p for which the reduction of P modulo p has order 
coprime to £. 

In the present paper, we extend the bridge between sequences, Galois theory, and elliptic curves by 
using Galois representations to determine the density of primes dividing the following non-linear, integral 
recurrence sequence. The motivation for our work was a sequence given to us by our mentor with properties 
reminiscent of Somos-like sequences that, as we shall see, diverged from their collection of elliptic curves. 
We call this novel sequence the ECHO sequence, which is defined as follows. 
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Definition 1.1. We define the ECHO sequence {bn} recursively by ( 6 o, &i, 62 , ^ 3 ) = (1,1,2,1) and for n > 4, 

bn—lbn—3 ^n—2 


bn. — 


bn—4 

'4n-l0n-3 


bn—\bn—3 2 


bn— 


'n-4 


if 71 ^ 0 (mod 3), 
if n = 0 (mod 3). 


Consider the elliptic curve E : y‘^ y = — 3x 4 and P = (4, 7) C E{Q). We show in Lemma [3]4| that 


(2n + 1)P = 


gH fjn) 

bl ’ bl 


where g{n) = 26^ - bn-zbn+z, and 


( bn + 3bn-ibn+2 if n = 0 (mod 3), 

/(”-) = Ln + b‘i_ibn+2 if n = 1 (mod 3), 

\^bn + 9bn_ibn+2 if n = 2 (mod 3). 


This equation relates the question of whether a prime p divides some element of the sequence {bn} to 
whether P in E(¥p) has odd order, and Galois theory can be readily applied to the latter problem. We 
explain this connection in Section 3. 

The motivation for looking at this specific curve and sequence is that the Galois representations of the 2^ 
division fields are not as large as possible, which was the case in the work of Jones and Rouse. Their work 
shows that a sequence arising from an elliptic curve with surjective 2-adic representation has divisibility- 
density 

In comparison, below are some approximate densities for our sequence. We define tt'(x) as the number of 
primes p less than x such that p divides some term of the sequence. 


X 

7r'(x) 

7r(x) 

7r'(x) 

7t(x) 

10 

3 

4 

0.75 

10^ 

13 

25 

0.52 

10^ 

91 

168 

0.541666667 

10^ 

636 

1229 

0.517493897 

10^ 

5118 

9592 

0.533569641 

10® 

41856 

78498 

0.533211037 

10" 

354158 

664579 

0.532905794 

10® 

3069170 

5761455 

0.532707450 

10® 

27092923 

50847534 

0.532826685 

lOlo 

242426819 

455052511 

0.532744712 

10“ 

2193850226 

4118054813 

0.532739443 


This data suggests that the fraction converges to a limit different from ^ = 0.523809. In this paper, we 
prove that this limit exists, and we compute its value. 


Theorem 1.2. 


lim 


r'ix) 


179 


= 0.5327380952. 


7r(x) 336 

In the process, we obtain a general result on the image of the arboreal representation: 


Theorem 1.3. Let E be an elliptic curve over Q and let P be a rational point on E. Suppose further that 
the classical Galois representation is surjective, and that P has no rational 2-division points. Then there 
are only two possibilities for the image of the 2-adic arboreal representation, up to conjugacy: the entirety of 
AGL 2 {'Z/ 2 ^'Z), and an index four subgroup that we denote by Elk- As a consequence, the density of primes 
p for which the reduction of P modulo p has odd order is either ^ or |||. 
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Last, we construct a surface whose rational points correspond to pairs {E/Q,P € E{Q)) such that the 
2-adic arboreal representation attached to {E,P) has image contained in the subgroup Elk- We use this 
surface to prove the following: 

Theorem 1.4. There exists a one-parameter family of curve-point pairs {E,P) such that infinitely many 
pairs in the family have arboreal image conjugate to Elk ■ In particular, infinitely many pairs {E, P) in our 

family have the property that the density of primes p for which the reduction of P modulo p has odd order is 
179 
336 ■ 

Acknowledgements. We would like to acknowledge Sagemath [12] and Magma [1], which we extensively 
used for computations. We would also like to thank Wake Forest University for providing resources for this 
research project. Thanks also to Michael Somos for providing input on the structure of the ECHO sequence. 
We also wish to thank the anonymous referee for helpful comments. 

2. Background 

An elliptic curve E \s a. non-singular cubic curve defined over a field K with a A-rational point on it. Such 
a curve has an equation of the form -|- aixy -\- a^y = -|- 02^^ -|- 040: -I- a^. Let E{K) be the set of points 

on the projective closure of E in P^(A). This set has the structure of an abelian group: if P, Q S E{K), and 
R = {x, y) is the third intersection of the line through P and Q with E, then P -\- Q = {x,—y — aiX — 03). 
We denote the abelian group structure on E{K) additively. 

Given an elliptic curve E/Q, we say that E has good reduction at a prime p if E/¥p is non-singular. 
Otherwise, we say that E has bad reduction at p. 

If P G E{C), the m-division points of P are defined to be the points Q for which mQ = P. We let [to“^]P 
denote the set of such points; this set has mf elements. 

If A/Q is a finite extension, let Ok denote the ring of algebraic integers in K . A prime number p ramifies 
in K if pOk factors as Oti P?; where the pi are prime ideals of Ok and ri > 1 for some i. If, in addition, 
A/Q is Galois and p is unramified in A/Q, then we define to be the unique element cr G Gal(A/Q) so 

that 

a{a) = (mod pi) 

for all a G Ok- The set | | is a conjugacy class in Gal(A/Q) which we denote by [-^^] • We will use 

the Chebotarev density theorem to prove Theorem 11.21 This theorem states the following. 


Theorem 2.1 ([5], edition 2, Theorem 8.17, page 153 or [3, page 143). If C C Gal(A/Q) is a conjugacy 
class, then 


lim 

a;—>-oo 


{p prime : p < x, = C} 


iq 


t{x) 


Gal(A/Q)|- 


If A/Q is an elliptic curve, let Q(A[to]) denote the field obtained by adjoining to Q all the x and y- 
coordinates of points in A[to], the set of points on A of order dividing m. We have A[m](C) = (Z/mZ)^. 
Because the group law on A is given by rational functions, it commutes with the action of the Galois group, 
and as a consequence we have the classical Galois representation p_E,m : Gal(Q(A[m])/Q) —5> Aut(A[TO]) = 
GL 2 (Z/toZ). This Galois representation has the properties that if a is the Artin symbol of a prime ideal 
above p, then 

tr PE, 7 n{cr) = p -I- 1 - ffE{¥p) (mod m) 

and det pE,m{o') = P (mod m). Moreover, by the Neron-Ogg-Shafarevich criterion [TTJ Theorem VIL7.1, 
page 184], Q(A[m])/Q is ramified only at primes that divide m and primes for which E/¥p has bad reduction. 

If A/Q is an elliptic curve and P G A(Q), the extension 
of [m“^]P, we have an arboreal Galois representation ujE,r 


[[m P)/Q is Galois, and if /3 is a chosen element 
: Gal(Q([m“^]P)/Q) ^ A[to] ni Aut(A[m]) given 
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by w_E,m(CT) = P,a\E[m\)- Proposition VIII. 1.5 on page 193 [TT] implies that Q([m“^]P)/Q is ramified 

only at primes at which E has bad reduction and primes dividing m. We are most interested in the case 
that m = 2^, E : + y = — 2>x + A, and P = (4, 7). This elliptic curve has bad reduction only at p = 3 

and p = 5. We let Kj. = Q([2“^]P) and dehne 

ujk : G&\{Kk/Q) AGL2{1I2^'L) := (Z/2'=Z)2 x GL 2 (Z/ 2 '=Z). 

We represent elements of AGL2(Z/2*Z) as pairs {v,M) of column vectors v and 2x2 matrices M. The 
group law is given by 

(vi,Mi) * {V 2 , M 2 ) = [vi + MiV 2 ,MiM 2 ). 

If E!K is an elliptic curve and it' is a number held, then for each prime ideal p above a prime p of Ok 
for which E has good reduction, there is a reduction homomorphism : E{K) —>■ E{Ok/p)- A point Q in 
E{K) maps to the point at inhnity in E{OkIp) if and only if the x and p-coordinates of Q have negative 
p-adic valuation. Another useful property of these reduction maps is that m Proposition Vll. 3 . 1 , page 176] 
the only points of hnite order in E{K) that can be contained in keifjjp have order a power of p. 


3. Connection between the ECHO sequence, E, and P 


We hrst translate the problem of hnding the density of primes dividing a term in the sequence into a 
question about elliptic curves by showing that p| 6 „ for some n > 0 if and only if P = (4, 7) G A(IFp) has odd 
order. 

To prove this, we introduce several lemmas that establish integrality and coprimality conditions on our 
sequence, then prove the formula established in Lemma l3.4l As a quick remark, one can extend the sequence 
into negative indices by noting that 


b 


n 


r;; f if” ^2 (mod 3), 
ifn = 2 (mod 3). 


In fact, induction shows that the ECHO sequence is symmetric by the relation Thus, the 

formulas proven here can extend in both directions, and we may use negative indices to establish base cases 
as needed. 


Lemma 3.1. The denominator of bn is eoprime to 3 and {bn (mod 3)} is periodic. 


Proof. Write bn = ^ where a„,c„ G Z are coprime. Interpret as G F 3 . We claim that for 

n = 0 (mod 9), 

^n+ 2 ; ^n+ 3 ; ^n+ 4 ; ^n +65 ^n+s) — (I 5 f; ^7 f 5 b? 2, 1, 2, 2) (mod 3). 


We will use induction to prove this; the base cases are simple to check. Assume that the sequence is 
periodic for k < n, and suppose that n = 0 (mod 9). Then the hrst eight congruences are easily checked. 

To calculate bn+s, let a = bn,b = bn+i,c = 6 „+ 2 , d = bn+3, and e = bn+4, and write bn+5 through bn +7 in 
terms of b, c, d, e. Then writing bn+s in terms of 6 , c, d, e, we have that 


bn +8 — 


Ke — bdJ + 
b^c^de 


where Ke = —9b^de‘^ — 36^c^e"^ + %‘^cdf'e^ — Qb'^d^e^ + bc^de^ — Zbc^d^e^ + ibcdf’e — — Zc^d'^e. 

Then 

Ke-bd'^+ c'^d^ Ke-d^{hd-c^) K - ad^ 
b^c^de b^c'^de b^c^d 

= K-a = K + 2 = 2 (mod 3), 


hence bn+s = 2 (mod 3). 


□ 
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Lemma 3.2. For n > 0 we have that e Z and gcd(6„, bn-a) = gcd(5„, bn- 2 ) = gcd{bn, &n-i) = 1- 

Proof. We will prove this by induction on the index n: 

The base cases can be easily checked. Assume for k < n that 6^ G Z and that bk is coprime to bk-a, 


bn-7 = a, bn-6 = 6 , 6n-5 = c. If u - 4 

671 — 4671—8 — bn — ^bn—7 b^_Q 

= 1 (mod 3) : 

=> ac — fi^ = 

0 

(mod 6 „_ 4 ), 

671 — 3671 — 7 ~ 672 — 4671 — 6 ^71 — 5 


bn-a = 

-e^ 

a 

(mod 6 „_ 4 ), 

671 — 2671—6 = 672 — 3671—5 36j^_4 


bn-2 = 

-c^ 

ab 

(mod 6 „_ 4 ), 

671 — 1671 —5 = 672 — 2671—4 ^71—3 


bn—1 = 

-c^ 

(mod 6 „_ 4 ). 


Note that 


bji—lbn—a ^n —2 — 9 


c^b'^ — c^a _ —c^{ac — b'^) 


(mod bn- 4 ), 


a‘ a a^b^ 

hence bn-ibn-a — bn -2 is congruent to 0 mod 5 „_ 4 . Therefore, 6 „_ 4 |( 6 „_i &„_3 — bn- 2 ), so bn € Z. 

The other two cases can be similarly checked. 

A straightforward argument can be made using Lemma [3.II to show that if p\bn, then p f bn-i,p f b„- 2 , 
and pf &r!,_ 3 . □ 

We now turn to connecting the sequence to our elliptic curve. One preliminary is required. 

Lemma 3.3. For n > 0, define 

(K-a^l + bn-abl-i+Sbl-^bn-Sbl-^bl-^ if n = 0 (mod 3), 

h{n) = } 3 bl- 3 bl + bn- 3 bl-i + bl- 2 bn-bl- 2 bl-i if n = 1 (mod 3), 

[bl-sbl + ^bn-abl-i + bl- 2 bn - 3bl-^bl-^ if n = 2 (mod 3). 

Then h{n) = 0 for all n e N. 

Proof. We proceed by induction. The base case of n = 1 is easy to verify by computation. 

Now suppose that the claim is true for k < n. If n = 1 (mod 3), then 

h{n) = ibl-fifin + bn-abl-i + bl-^bn - 6 L 2 &L 1 

= bn{bn-2 + ^bn-abn) + (^n-3^n-l ~ ^n- 2 ) 


— bn 


36: 


671 — 3671—1 ^71 — 2 


n—3 


— bn |^ 6^_2 + 36^_3 

6 . 


671—4 

671—3671—1 b ^_2 


bn—4 


+ 6 ^_ 36 ji _4 ■ 
H- 6^_36n-46i 


(671—3671—1 ^n—2) 

671—4 


671—4 

bn 

bn—4 


{bl-fiol-^ + bn-4bl-2 + Sbl-sbn-l - 'ibl-fi)l- 2 ) 
h{n — 1). 


The equations for cases n = 1,2 (mod 3) similarly reduce, and in general, h{n) = 
Therefore, by induction, h{n) = 0 for all n > 0. 

This suffices to prove the following. 

Lemma 3.4. Define P = (4, 7) on E : + y = — 3x + 4. Then for n > 0, 

/(^)' 


bn—4 


h{n — 1). 

□ 


(2n+ 1)P = 


62 ’ 63 
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where g{n) = 26^ - 6 „_ 3 &„+ 3 , and 

{ b^ + 35 ^_ 36„+2 if n = 0 (mod 3), 

bl^ + 5^_i 5„+2 if n = 1 (mod 3), 

5^ + 95 ^_ 36„+2 if n = 2 (mod 3). 

Furthermore, each coordinate in this expression is in reduced form. 

As a consequence of Lemma [3^ the proof of the following is easily obtained. 

Corollary 3.5. Suppose p is a prime for which E(¥p) has good reduction. Then p|5„ for some n > 0 if and 
only if P & E{¥p) has odd order. 

The proof of Lemma is as follows. 


Proof. Proceed by induction. For n = 0,1, 2, (2 • 0 + 1)P = (4, 7), (2 • 1 + 1)P = (—1, 2), and (2 • 2 + 1)P = 
{j, thus the base cases are true. 

Induction Hypothesis: Suppose that the claim is true for all n < fc € N. Thus, 

(2t+i)p=''®ri>.-A+3 m- 

This, along with 2P = (1,1), implies that 


bl 


bl 


(2(fc + 1) + 1)P = {2k + 1)P + 2P = 


2 hl - bk-sbk+s f{k) 


bl 


bl 


( 1 , 1 )- 


By substituting the equation of the line in for y and examining the coefficient, the x-coordinate of 


( 2 (fc + l) + l)Pis 


/3-1 

a — 1 


— 1 — a for a = 


2h\ - bk-zbk+z j ^ f{k) , 26^ _ bk-2hk+i 

-Ts- and /3 = — 3 ^. Let a = ---; 


bl 


bl 


62 

^/c +1 


we 


hope to show that a' is the x-coordinate of {2{k + 1) + 1)P. In doing this, it suffices to show that 

2 


( 1 ) 


/3-1 

o; — 1 


— 1 — a — a' = 0. 


Let the expression on the left be called expression ©• 

Using our recursive definition for { 6 „}, we may substitute higher valued sequence points in terms of lower 
points in m so that o is written as a rational fraction in terms of only the four sequence points bk -3 
through bk. Magma explicitly tells us that h{k) = 0 is a factor of the numerator (for the same h{n) defined 

26^_i_^ — bk-2bk+A 


Lemma Therefore, © = 0 , and so the x-coordinate is a' = 


bl+i 


Next, because E : y"^ + y = — 3x + A, the addition of the two points is the third intersection point 

reflected over the line y = —i. This action sends any point ( 7 , 5) to ( 7 , —5 — 1). 

The third point is given by substitution of the newly found x = a'. Thus, using the line equation it 
suffices to show that 

a — 1 


bl+i 


( 2 ) 




f{k) 

bl 


- 1 


26 ^ -bk—^bk+z 


bl 


- 1 


26 ^_^^ — bk-2bi+A 

bl+i 


- 1 


/(fc + 1) 

6 ^ 

^k+l 


= 0 . 


Call the left hand side expression of the above @ . In similar fashion to finding the x-coordinate, ([5]) may 
be re-written with only terms bk -3 through bk by substitution. Magma tells us this has h{k) as a factor 
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/(fc + 1) 


of the numerator. Thus, ([2]) is always 0 and —73 - - is the y-coordinate as desired, which completes the 

°fc+i 


induction. Therefore, (2n + 1)P = 


gin) fin) 


P ’ 63 

To see that this is in reduced form, note that Lemma lA.81 implies that gcd( 6 „, 6 re± 3 ) = 1. Thus, the 
26 ^ — bn-3bn+3 


^-coordinate 


62 


is already in reduced form, and hence the ^-coordinate, having 6 ^ in its de¬ 


nominator, is also in reduced form. 


□ 


4. Computing lim 

x—J-OO '^(^) 

This connection between the sequence and elliptic curve gives us a way to explicitly compute 7 r'(a;) for 
X < 00 . We test whether P has odd order for those primes less than x with good reduction. 

If p is a prime of good reduction, Proposition 3.5 allows us to determine whether or not p divides a term 
in the sequence, depending on if P S £’(]Fp) has odd order. We must also consider the cases where the 
curve has bad reduction. Since our curve has discriminant —3® • 5^, the only bad reductions are at p = 3, 5. 
As a result of Lemma r3.il 3 divides a term in our sequence, and so is included in our calculation of Tr'(x). 
In contrast, we show below that 5 does not divide any term in the sequence, and so is not included in the 
computation of 7 r'(a;). 

Lemma 4.1. No term in the sequence is divisible by 5. 

Proof. For the first 24 terms of the sequence, no term of the sequence is congruent to 0 modulo 5. By 
induction, it can be shown that no element of the sequence is divisible by 5 because the sequence is periodic 
modulo 5, with period 24. Thus, the desired result follows. □ 

In order to determine the primes less than 10^^ for which P € P(Fp) has odd order, we wrote code 
using PARI/GP [13] to perform computations on a server with 24 CPUs, each of which were an Intel Xeon 
E5-2630 2.3 GHz processor. By dividing the task into 24 different processors, we essentially divided 10^^ by 
24 and computed the number of primes for which P € E{¥p) has odd order for each of the 24 ranges. The 
completion of all computations required approximately 4 days. Upon determining the primes of odd order, 
we then calculated means using the equation: 

mean = 7 r'(x)/number of primes, 

where x = 10^ for 1 < fc < 11 and Ti'ix) equals the number of primes less than x for which P G Ei¥p) has 
odd order. 

With knowledge of the prime factorization of the denominator of the fraction above, we made calculations 
to hypothesize which fraction correctly described the number of all primes for which P G Ei¥p) has odd 
order. It was known, after studying the work of Rouse and Jones [B], that the prime factorization of the 
denominator should contain a power of 2 and some factor of 63. Therefore, there were approximately six 
cases, as the power of 2 varied, and 3 and or 7 were included in the factorization. With the theoretical values 
for each mean depicting a value close to 0.53273, the mean for the 10^^ case was used to find the numerator 
of the fraction by multiplying the denominator by 0.532739443. Gonsidering the mean as the probability 
of there being the computed number of primes for which P G U(Fp) has odd order and 1 — mean as the 
probability of there being the number of primes of even order, we computed the standard deviation, variance, 
and standard error of the mean to determine the certainty of the data, and we used the z-scores to better 
evaluate each fraction that we tested. After studying the z-scores for each of the six cases, we determined 
that the denominator was 336, with a prime factorization of 2^ • 3 • 7. We calculated the numerator to be 179, 
using the mean of the 10^^ case, and so we predicted the fraction to be i||, yielding a decimal of 0.532738095 
with z-scores of an absolute value less than 0.7. The most positive z-score was 0.582 for the 10^ case and 
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the most negative z-score was —0.674 for the 10® case. We determined that the same z-scores and fraction 
were the best representation of three of the six different cases. Thus, our data supports the notion that the 
fraction is an adequate model for the density of primes for which P G if(Fp) has odd order. 

5. Relating odd order to the arboreal representation. 

We now define a condition equivalent to P = (4, 7) having odd order in if(Fp) for a prime integer p. This 
will relate the current problem to arboreal Galois representations, which gives us more tools to work with. 
From now on, we consider only primes not equal to 2, 3, or 5, which are the ramified primes or primes of 
bad reduction. 

We fix the following terminology. Let {/3fc(i)} be the set of elements of E{C) for which 2^ • Pk(i) = P for 
f G {1,..., 4^}. Let Kk be field obtained by adjoining to Q all the x and y coordinates of such points {/3fe(i)}. 
Also, let x{j5k(i)) and y{j3k{i)) denote the x and y-coordinates of Pk{i)- 

Theorem 5.1. Let p he a prime unramified in Kk, {v, M) € ujk ^, and det(M — /) ^ 0 (mod 2^). 

Then the point P has odd order in E{¥p) if and only if v is in the column space of {M — I). 

Proof. (=^>) Suppose that P has odd order in E(¥p) for some prime p. Note that an element a in a finite 
abelian group G has odd order if and only if for any positive integer k there exists an element fik & G such 
that 2^-f3k = a. Thus, for every k, there exists fik{n) € E{Wp) such that 2^-f3k{n) = P for some n G {1,..., 4^} 
for each integer k. There is a bijection between the 2^-division points of P over Fp and the 2*-division points 
of P over Kk, because the difference between any two 2*-division points of P is a 2^-torsion point and the 
reduction modulo p map is injective on torsion points with order coprime to the odd prime p. Therefore we 
know we may identify this Fp-point fik{n) with one fik{n) in Kk- 

Since the reduction of /3fc(„) is in E{¥p), it is fixed by the Frobenius automorphism, which corresponds 

to some element of ■ Let CTp = for some prime ideal p over p be such an element. Then 

<^p{fik{n)) — fik(n) = 0 (mod p). But, crp{fik(n)) ~ fik{n) IS 2^-torsion and the reduction map is injective on 
torsion coprime to p, so in fact, <Jp{l3k(n)) = fik(n)- 

Recall the homomorphism ojk '■ Gal(Arfe/Q) —> AGL2(Z/2*Z). Define the action oi g = {v,M) G 
AGL2(Z/2'=Z) on f G (Z/2'=Z)2 by 

g{x) = M ■ X + V. 

We fix some element fik{m) G [2^]“^P and then = (o’(/3fc(m)) — fik{m),<^\E[ 2 >^])- Note that the 

difference of any 2^-division points of P is a 2^-torsion point. The set {fik(i) — fik(m)} is thus equal to the 
set of 2^-torsion points, which is isomorphic to (Z/2*Z)®. Since we have a bijection between elements /3k{i) 
and f3k{i) — fik{m), we have a bijection between {f3k(i)} and {x G (Z/2*Z)®}. Furthermore, it is easy to check 
that this bijection respects the group actions involved. 

We have CTp = and fik(n) G E{C) such that <Jp{fik{n)) = Pk(n)- Let oje^ 2 ’‘{'^p) = {v,M) and x 

correspond to (3k{n) by our bijection. Finally, <Jp{l3k(n)) = Pk{n), so 2 '= ('^p)(^) = and M ■ x + v = x. 
{M — I)x = —V. Equivalently, v is in the column space oi M — I. 

(<^=) Conversely, suppose there exists an element (v,M) of the image of Uk, with v in the column space 
of M — det(M — /) ^ 0 (mod 2^), and {v, M) G ujk ^ • Then {M — I)x = —v for some x, which 

implies that Mx + v = x. Thus, there is a vector x fixed by the action of {v, M). By the above bijection, we 
know that the fixed point x corresponds to exactly one fik{i), and that the pre-image of {v, M), an element 

of fixes it. 

L p J 
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Thus, the existence of a solution to the equation (M — I)x = —v implies that the coordinates of some 
(ik{i) E^re fixed in Kk by ap. By definition of the Artin symbol, this implies that ap fixes the coordinates of 
(mod p). Since ap is the Artin Symbol of Gal(Arfc/Q) over a prime ideal, it is in fact the Frobenius 
automorphism, defined by ap(x) = x^ (mod p). Furthermore, the Frobenius automorphism is a generator of 

Gal • Thus, is fixed by all of Gal , and we conclude that is Fp-rational. 

Finally, the classical theory of Galois representations tells us that det(M — I) is equal to the order of 
A(Fp) (mod 2'^). Now det(M — /) ^ 0 (mod 2'^), so the order of £’(Fp) is not congruent to 0 (mod 2^). 
Recall that if a is an element of a group, order(na) = n) • ^i'ace the order of divides the 


order of the group, it follows that order{2P) = or(ier(2^+^/3j.(i)) = order{P). We conclude that P has odd 
order. 

Thus, P has odd order in A(Fp) for an unramified integer prime p precisely when —v is in the column 
space of {M — I), where {v, M) S im(a;fe), det(M — ^ 0 (mod 2^), and (F, M) G im ^ ^ ■ 


□ 


6. Kinetic Subgroups of AGL2(Ij/2^Z) 

The work so far suggests that understanding the image of the arboreal representation will help to relate 
P with fields Fp for which P G E(¥p) has odd order. This becomes a group theory question concerning 
the affine general linear groups. We present a system of subgroups here that help dissect the image. As 
preliminaries, we use the following terminology. 

Definition 6.1. Let a subgroup G C AGL2{'L/2^'L) be called kinetic if both the following projection maps 
are surjective: 

pr ■G^GL 2 (fL/ 2 ^'L), 
j>:G^ AGL2{Z/2Z). 

Definition 6.2. A calculation in Magma shows that exactly one proper subgroup G C AGL2(Z/2^Z) is ki¬ 
netic, up to conjugacy; let H 2 denote a specific representative of the conjugacy class. Letpk ■ AGL 2 {'L/ 2 ^'L) 
AGL2{'2j/ 2^~^'L) be the canonical projection from AGL2(jZ/2^'Z) down to AGL2{'L/2^~^1i) for k>2. Then 
for k > 3, Hk is recursively defined as 

Hk := 

For future use, it should be noted Magma also shows Ft^ to be the only proper kinetic subgroup of AGL2(jZ/2^7j) 
(up to conjugacy). 

For reference, a set of generators for 7J2 are 



Furthermore, iJ 2 is an index 4, maximal subgroup of AGL2(Z/2^Z)0 

Note that the kinetic conditions are given by surjectivity of maps. A consequence is that if a group surjects 
onto a kinetic group, it tends to inherent kinetic conditions. We make the claim that the only kinetic 
subgroups of AGL 2 {Z/ 2 '^Z) for fc > 2 are exactly Flk (up to conjugacy) and the whole group AGL 2 {'L/ 2 ^X) 
itself. One direction is given here: 

Lemma 6.3. Both AGL2(^/2^Z) and Flk htc kinetic subgroups of AGL2{'Z/2^'Z). 


^For computational purposes, it is easier to use a representation of AGL 2 (Z/nZ) embedded in GLafZ/nZ) with the bijection 

{v,M)^ [^f]. 
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Proof. It is clear that both maps (p : AGLiifLI^Jf) and pr : AGL2ifLl2^1) —>■ GL 2 (Z/ 2 ^Z) 

are both always surjective. 

For iJfe, the claim is true by induction. By definition, H 2 was defined to be a proper kinetic subgroup 
of AGL 2 (Z/ 2 ^Z). For all fc > 2, since Hf^ was dehned as the pre-image of it is clear that both H^. 

projects onto all of GL2{1^/2^7f) since iFfc-i has second component intersecting all of GL 2 (^/ 2 ^“^Z) and 
also that Hk surjects onto AGL2{1i/21,). □ 

To show the converse, namely, that Hk is the only proper kinetic subgroup of AGL2{1^/2^'Z), it turns 
out to be sufficient to examine only the case fc = 3 by Lemma 16.61 which will follow from some standard 
preliminary facts. (Recall that the Frattini subgroup $(G) of group G is the intersection of all maximal 
subgroups of G.) 

Proposition 6.4. Let G be a group. Then the following are true, where $(•) denotes the Frattini subgroup. 

• Suppose N ^ G is a normal subgroup. Then $(7V) C ‘h(G). 

• Suppose G is a 2-group. Then for all g in G, g^ € ^{G). 

Proposition 6.5. We have \GL2iZ/2^Z)\ = 6 • 16^“^ and |AGL 2 (Z/ 2 ^Z)| = 24 • 64^“^. 

Lemma 6.6. Fix fc > 3 and consider r € N such that 3 < r < k. If 3{x,M) € AGL2lfL/2^'L) such that 
(x,M) = (0,/) (mod 2’"), then {x,M) € 4 >(AGL 2 (Z/ 2 ^Z)). 

Proof. Let Nk := ker((/)fe). Recall that 4>k '■ AGL2{'Z/2^7f) -» AGL2ifL/2'L) is defined as the natural quotient 
map. And by the counting formula, 

^ |AG£2(Z/2^Z)| ^ 24 ■ 64^-^ ^ 

' |AGL2(Z/2Z)| 24 

Thus, Nk is a 2-group. 

We proceed by induction on the value k — r. For the case r = fc, it is clear that (0,/) G AGL2ifLl2A'If) 
and is in $(AGL 2 (Z/ 2 '=Z)). 

Inductive Hypothesis: Suppose that for all r > / -|- I, the claim is true. Then examine some arbitrary 
element {x,M) G AGL2(Z/2^Z) such that 

(x, M) = ( 0 ,/) (mod 2 ^). 

Thus, {x,M) = (2^, / -I-2^A^) for some y G (Z/2^Z)^ and N G GL 2 ( 2 / 2 ^Z). 

Note that {2^~^y,I + 2^~^N) G AGL 2 ( 2 / 2 ^Z) as well. Then since I > 3 2{l — 1) > I + 1, 

{x,Mf = {2^-^y,I + 2^-^Nf 

= ( 2 *-V+ 2 '" V+ 22 ('-i) ATy, I + 2^N + Ar 2 ) 

= ( 2 V+ A^y, -h 2^N + N'^) 

= {2^y,I + 2^N) (mod22('-i)) 

= {2^y,I + 2^N) (mod2'+i). 

Equivalently, 

{x, Mf ■ (2V, I + 2‘N)-^ = (0, 1) (mod 2'+^). 

Therefore, by our inductive hypothesis we must have (T, M)^ ■ (2*y, / -|- 2^N)~^ G ^(AGL2(Z/2^Z)). 

Note that (2*“^y, / - 1 - 2^~^N)'^ G ^{Nk) C ^{AGL2{Z/2^Z)) by proposition 16.41 Thus, closure implies 
that (2*y, I + 2^N) = {x, M) G ^(AGL2(Z/2^Z)) as well, and so by induction we are finished. □ 

Note that any subgroup lies in a maximal subgroup. Because the kinetic conditions come from surjectivity 
of predefined maps, if a subgroup H of AGL 2 (Z/ 2 ^Z) is kinetic, for all groups G C AGL2{Z/2^Z) containing 
H, G is also kinetic. Thus, to find kinetic subgroups, we may in general examine maximal subgroups. 
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Corollary 6.7. Suppose M C AGL2(^/2^Z) for k > 3 is a maximal, kinetic subgroup. Then M and Hk 
are conjugate subgroups. 

Proof. Let M C AGL 2 ifli/ 2 ^'L) be a maximal, kinetic subgroup. Examine the map ip : M ^ ylGL 2 (Z/ 2 ^Z) 
by composition of the (pi maps. By Lemma 16.61 every maximal subgroup of AGL^ifLj^fTf) contains iV^, 
the kernel. By the correspondence theorem, there is a bijection between subgroups containing the kernel 
and subgroups of the image. Since p is surjective, M is in bijection with a maximal, proper subgroup of 
AGL 2 {'Zf 2 ^'Z). Furthermore, it is clear that this subgroup of AGL 2 (Z/ 2 ^Z) is also kinetic because these 
maps preserve surjectivity. 

Recall by computation that conjugates of are the only maximal, kinetic subgroups of AGL 2 {fL/ 2 '^'L). 
Thus, piM) = gH 3 g~^, and by definition of the Hk subgroups, M C {g)HkP~^{g~'^) is a subset of a 
conjugate of Hk. By assumption that M is maximal, M is a conjugate of Hk. □ 

Notice that this corollary followed from the fact that any kinetic maximal subgroup of AGL 2 (Z/ 2 ^Z) 
would have to show up in AGL 2 (Z/ 2 ^Z) by Lemma 16.61 In fact, we may make a similar statement about 
maximal subgroups of Hk. 

We will later show that \Hk\ = 6 • 64*^“^. Since Hk is kinetic, we have the following surjection: 

(fk ■■ Hk ^ AGL 2 {Z/ 2 ' 1 ). 

Thus, by the counting formula we have 

I \agL2{I./2Z)\ 24 

and ker((/)fc)|//j, is a 2 -group. 

Lemma 6.8. Suppose {2^v,2^M) S Hk. Then {2^~^v,2^~^M) is also an element of Hk. 

Proof. We proceed by induction on k. For the case where fc = 2, a calculation in Magma verifies the claim. 

Inductive Hypothesis: Suppose that the claim is true for all fc < n S N. Then examine an arbitrary 
{2‘v,2‘M) € Hn+i. By the quotient map Pn+i, we have (2*u,2^M) £ Hn. Then by our inductive hy¬ 
pothesis, we know that {2^~^v,2^~^M) G iL„. By the definition of the Hk, since pn+i{{2’'~^v,2’'~^M)) = 
( 2 '-iu, 2 '-iM), we must have { 2 ^-'^v, 2 ^-^M) G Hn+i- Therefore, by induction we are done. □ 

Notice that every step of the proof of Lemma 16.61 holds for Hk as the main group, and so we similarly 
have the following corollary. 

Corollary 6.9. For k >3, there exists a bijection between maximal, kinetic subgroups of Hk and maximal, 
kinetic subgroups of H^. 

Proof. The natural mapping p : Hk ^ H 3 is the same as the map p : Hk ^ AGL 2 {'Zf 2 ^Z) because the pi 
maps of Hi are contained in Hi-i. Thus, similarly to Lemma 16.61 all maximal subgroups of Hk contain the 
kernel of p. Therefore, there is a bijection between maximal kinetic subgroups of Hk and maximal kinetic 
subgroups of H 3 as desired. □ 

This suffices to show the converse of the original claim. 

Theorem 6.10. Let k >2. The only kinetic subgroups of AGL 2 {'Z/ 2 ^X) are AGL 2 {Tj/ 2 ^'L) itself and Hk. 

Proof. For k = 2, we know from our initial definition of H 2 that H 2 was the only proper kinetic subgroup of 
HGL 2 (Z/ 22 Z). 

By Corollary 16.71 we know that for k >3, the only maximal kinetic subgroups of AGL 2 (Z/ 2 ^Z) are Hk. 
Thus, we must check that no proper subgroups of Hk are also kinetic. However, by Corollarv l6.91 any kinetic 
proper subgroups of Hk are in bijection with a proper kinetic subgroup of iLa. By Magma computation, we 
find that that there are no proper kinetic subgroups of H^, hence there are no proper kinetic subgroups of 
Hk. □ 
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7. The Image of the Arboreal Representation 

The significance of these kinetic groups is that they are exactly the images of arboreal representations. 
We can say more for our specific curve and point. 


Lemma 7.1. For all k >2, im(a;fc) = i7fc. 


Proof. Our strategy is to show that im(a;fe) must be kinetic but not the whole of AGL2{1‘/2^'L), since by 
Theorem 16.101 the only two kinetic subgroups of AGL 2 (^/ 2 ^Z) are the entire group and Flk- 
To see that im(a;fe) is kinetic, we may check the surjectivity conditions. 


• The first condition for kinetic subgroups, that Uk surjects onto GL 2 (Z/ 2 ^Z), can be checked using 

the criteria of [3]. Their main theorem shows that ujk surjects onto GL 2 (Z/ 2 *Z) for all k precisely 
when the curve E satisfies the following conditions: |A(i?)| Q^, |A(i?)| ^ 2Q^, E has no rational 

2-torsion, and there is no t such that i{E) = + 8). The discriminant conditions can be 

checked by hand, and Magma easily determines that there are no rational solutions of the equation 
j{E) = -\- 8 ). Their criteria then guarantee that im(a;fe) satisfies the first kinetic condition. 

• We now show that the image of the representation satisfies the second kinetic condition. Basic Galois 
theory applied to each coordinate of Q implies that an element of [2]“^P is im(a;fc)-invariant if and 
only if there is a rational point Q such that 2Q = P. 

Since P = (4, 7) is a generator of E/Q, there is no rational point that doubles to P, and thus no 
element of E[2] = (Z/2*Z)^ that is fixed by im(a;fe) C AGL 2 (^/ 2 ^Z). Note that 6 divides | im(a;fe)| 
since it surjects onto GL 2 ( 2 / 2 Z), and that | im(a;fc)| > 6 . 

— Suppose I im(wi)| = 6 . In this case the image must be conjugate to {1} x GL 2 (Z/ 2 Z), which we 
check in Magma. Consider first the case that the image is {1} x GL 2 (Z/ 2 Z). Recall that the 
afSne part of wi is defined by the mapping U!i{cr) = cr((5) — Q. In particular, if the affine part of 
the image is trivial, a{Q) — Q = 0 for all a in our Galois group. But then Q is a rational point 
that doubles to P, a contradiction. To take care of the conjugate cases we use that a subgroup 
fixes an element if and only if a conjugate subgroup fixes a similar element. 

— Suppose I im(a;i)| = 12. Note that AGL 2 ifL/ 21 ) = S' 4 , and the only index 2 subgroup is A 4 . By 
calculation, an explicit representation of A 4 in AGL 2 ( 2 / 2 Z) does not surject onto GL 2 (^/ 2 Z), 
a contradiction. 

— Thus, the only possible option is that | im(a;i)| = 24. 

Therefore, we see that Wfc : Gal(Arfc/Q) -» AGL 2 ( 2 / 2 Z) is surjective. 


To see that im(u;fc) is not all of AGL 2 (Z/ 2 ^Z), we use a criterion of Jones and Rouse. In Theorem 5.2 of 
[B], the authors show that an arboreal representation with surjective classical representation is surjective if 
and only if P is not twice a rational point and Q(/3i) ^ Q(P[4]). We show that, in the case of our curve E, 

Q(/3i) C Q(P[4]). 

Consider the tower of fields below. 
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Using division polynomials, we may calculate the size of the Galois group of Q(x(if[4]))/Q, and thus the 
size of the extension itself. Indeed, Magma tells us that the degree of the extension is 48. On the left side 
of the diagram, Ki must have degree 24 because |Gal(ifi/Q)| = |AGL 2 (Z/ 2 Z)| = 24. If we calculate the 
degree of Q(a;(^P)) using division polynomials, we get an extension of degree 24. Thus, the left side tower 
has collapsed, and the defining polynomial for each extension on the left hand side is actually just equal to 
the polynomial that defines the a;-coordinates. Now we can determine whether or not Q(/3i) C Q(iil[4]), since 
the smallest field containing both Q(a;(£l[4])) and Q{^P) will be the splitting field of the product of their 
respective defining polynomials. Magma tells us that this splitting field has degree 48, and so the smallest 
field containing both is Q(a:(ill[4])). But Q(a:(£l[4])) C Q(i<l[4]). 

Therefore, since im(wfc) is kinetic but not equal to ^GL 2 (Z/ 2 ^Z), it must be equal to Hk- □ 

As dehned above, H 2 is the non-trivial kinetic subgroup of AGL 2 (Z/ 2 ^Z), up to conjugacy. Since Hk consists 
of lifts of H 2 , the structure of Hk is then determined by the structure of iJ 2 - To understand Hk well, we 
present some facts about iJ 2 - 

Size: By parity arguments, |GL 2 (Z/ 2 *Z)| is easily computed. It follows that |AGL 2 (Z/ 2 ^Z)| = 24 • 
64*“^. Computationally, we find that [AGL 2 (Z/ 2 ^Z) : H 2 ] = 4. Since ipk ■ Hk —?■ Hk-i is a 
surjective homomorphism, one has that [AGL 2 (Z/ 2 *Z) : Hk\ = [AGL 2 (Z/ 2 ^“^Z) : Hk-i] for all 
k > 3. So by induction, we see that for all k > 2, [AGL 2 (Z/ 2 ^Z) : Hk] = 4 and 

Structure: We use the following terminology. 

Definition 7 . 2 . Fix M G GT2(Z/2^Z). Let Vm ■= {a : {a,M) € Hk}. We eall Vm the set of 
associated vectors of M. 

Definition 7 . 3 . For any k €N, define 

Vij := {x G (Z/2*Z) : X = []] (mod 2)} . 

Because H 2 is finite and we have an explicit representation, computationally we find the following. 

Proposition 7 . 4 . The group H 2 is the disjoint union of the sets Vop x J, Vqj x J, Vi^ x [ J J, 
and Ui^i X [p J] J where J is a subgroup of GL 2 { 1 ^/2^1,) that is isomorphie toZ/3ZxD4 by the action 
kernel V 4 . 
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Proof. Magma shows this to be true. For reference, {[? q] ? [3 oli generates J. 


□ 


8 . Computing the Fraction 

Recall that if p is a prime unramified in Kk, (v, M) € Wfc ^ ^, and det(M — /) ^ 0 (mod 2^), then 

the point P has odd order in E{¥p) if and only if v is in the column space of (M — I). 

By the Chebotarev density theorem, 


lim 

ai —^00 


{p prime and unramified in ■ p < x, C S'} 


1^1 


7 r(x) |Gal(iFfc/Q)r 

where S a union of conjugacy classes in Ga^RT^/Q). This is not quite the limit required to compute the 
fraction of primes dividing the EGHO sequence. We will choose S so that C S for all k precisely 


when some dp G gome f3k(i)- 

We observe that if this fact is true for a certain k, it is true for j < k as well. Thus, to find the primes 
for which that is true for all k we need only consider its limit as k approaches infinity. Therefore, 


lim —= lim lim 

x^oo 7r[X) fc—>-oo x^co 


{p prime and unramified in Kk '■ p < x, ^5'} 


Moreover, since 


1^1 


|wfc(5')| 


7r(x) 

|{(F, M) g gfc : F e im(M - I)}\ 
\Hk\ 


|Gal(Xfe/Q)| |ccfe(Gal(iffe/Q))| 

we may compute the density in terms of the the structure of Plk- 

We must make two separate choices of S to compute this fraction. We consider |Gai(Kt!/Q)| '"^tiere is 
the set of all elements in Gal(Rrfe/Q) such that 

{v, M) G iJfe, det(M — /) ^ 0 (mod 2^), and v G im(M — I). 

This contains only elements corresponding to primes p for which P has odd order in E(¥p). Secondly, we 
consider |Gai(Ki/Q)| where S 2 is the set of all elements in Gal(Rrfc/Q) such that for all {v,M) G Elk, v is in 
the column space oi M — I. This contains all the elements corresponding to primes p for which P has odd 
order in E(¥p), but not exclusively those elements. Both S'! and S '2 are unions of conjugacy classes. 
Gonsider 

|^2|-|^l| 1^2 -^ll 


|Gal(iGfc/Q)| 


= lim 

k—¥oo 


|Gal(Xfc/Q)|' 


We then note 

1^2 -gl I 

fe-s-oo |Gal(iGfc/Q)| 

Thus, we may use 


|{(i/, M) G iJfe: det(M — 7) = 0 (mod 2^) and F G im(M —/)}| 

= hm - , „ ., - = 0. 

k—^oo 


lim 1^11 

fe-s-oo |Gal(Rrfc/Q)| 


= lim 


|Gal(iFfc/Q)| 

1^21 


fc —>00 |Gal(iFfc/Q)| 


to evaluate lim 


7r'(x) 

, since 


lim 


I'S'il ^ 7r'(x) ^ I<g2| 

|Gal(Rrfc/Q)| ~ x^oo tt(x) ~ fe-s-oo |Gal(Rrfc/Q)| 
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For our computation of the fraction, we chose to evaluate the larger limit 


lim 1^21 
fc —>00 |Gal(iFfe/Q)| 


\{{v,M) e Hk -.v e im(M - J)}| 

fc—^-oo 


Considering the above discussion, we make the following essential definition: 

Definition 8.1. Let M G M2(Z/2’’Z), and S C Z/2^Z. We define 

\{{v,M') :v G S,v Gim{M'),M'= M (mod 2’')}| 

= hm -—-. 

K—^OO \^k\ 

Note that if r > 1, M is invertible and im(M — /) fl Vm 0, we have the special case 

\{{v,M') GHk :vGim{M'-I),M' = M (mod 2’')}| 


fi{M - I,r, Vb,o) = lim 

k—¥oo 


\Hk\ 


By partitioning H^. at every level into lifts of matrices in H 2 , the limit that we want to compute from the 
Chebotarev density theorem discussion becomes 

MGGL 2 


We first note that if im(M — /) fl Vm is empty at level fc = 2, it must be empty for every lift. (Otherwise we 
could reduce the matrix and vector and get an element of the intersection at k = 2.) Thus, we must only 
compute n{M) for those M where im(M — /) fl Vm is nonempty at level k = 2. 

We now observe that 

|im(M-J)nCM|/|VM| 

fc^oo ^ |GL2(Z/2^Z)| 

MgGL2(Z/2'“Z) ' ' ' '' 


V M^-/,2 ,Gm)= lim V 

MgGL 2 


This fraction changes, however, depending on k and on the determinant ol M — I. 


Therefore, instead of taking the sum of ^ divided by |GL2(Z/2^Z)|, we consider 

I im(M — /) n Vm\ _ I im(M — J) 0 Vm\ \ im(M — /)| 

\^\ “ |im(M-/)| \V^\ 


I im(M — J) n Vm\ 
I im(M — /)| 


■4|det(M-/)|2. 


Here |s |2 denotes the 2-adic absolute values of s, namely, |s |2 = 2 °’'d 2 (s)^ ^he second equality above 
follows from a result of [3]: if det(M) = 2’’s, with s odd and r < k, |(z™ 2 ;^)^| “ I ~ ^)U From 

now on we define /m •= ^^ is not surjective, the intersection of the column space of 

M — I for a given M G GL2(Z/2^Z) and the set of vectors v G (Z/2^Z)^ such that {v,M) G Hk may be 
empty, or may be a fraction of im(M — I). Since Vij contains one fourth of the vectors in (fLl2f%)'^ for each 
i, j,the fraction the column space that contains a subset of Vm, the set of vectors for which {{v,M)\v G Vm} 
is in Hk, may take on one of a few values between 0 and 1. 

We may easily determine the possible values for /m and divide the sum in the above limit into sub-sums 
by the following result. 


Lemma 8.2. If im(M — /) fl Vm 7 ^ 0, then \ im(M — /) fl Vm| = | im(M — /) D Vo,o|- Therefore, fM rnay 
take the values 1, i, or 0. 
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Proof. Suppose iin{M — I)r\VM ^ 0- Consider a : im(M —/)nVb,o ini(M —/)nCM given by a{w) = v + w. 
Any element of im(M — /) n Vm differs from a fixed v £ im(M — /) fl Vm by an element of im(M — J) fl Vb,o, 
including v itself. Thus, cr is a bijection, since Wi + v = W 2 + v implies that Wi = W 2 and given any 
X £ im(M —/) n Vm we know (x — v) £ im(M —/) fl Vq.o- Therefore, | im(M —/) fl Vo_o| = | im(M —/) n Vm|. 

By the second isomorphism theorem of modules, [im(M — /) : im(M —/)nVo,o] = [im(M —J) + Vb,o : Vq.o]- 
Since Vo,o has index four in the entire set of vectors, it has index two or one in im(M — /) + Vq.o, and so we 
are done. Finally, if im(M — I) D Vm = 0, then /m = 0. 

□ 

We next observe that the fraction /m for a given M £ GL 2 ifLIVlf) is the same for all lifts of M in 
GL2(Z/2'=Z). 

Lemma 8.3. The fraction fM equals fM^ for all lifts Mk £ GL2(Z/2^Z) of M £ GT2(Z/4Z). 

Proof. Since Vb,o G ifLIViff lifts to Vb,o G (Z/2^Z)^ for any k and because M' = M (mod 4), the image of 
M — I £ GL2(Z/4Z) lifts to the image of M' — / in GL2(Z/2^Z) we conclude im(M' — /) fl Vq.o is a lift of 
im(M — /) n Vo.Q. Therefore, the index of both intersections in the respective images remains /m. 

□ 


We can now explicitly calculate the fraction using the following cases. 

Case 1 (det(M — I) is invertible). 

Any lift of an invertible matrix is invertible. Indeed, for these matrices and all of their lifts, the image of 
M — I is the entirety of (Z/2^Z)^, so 2, Vq.o) = Since there are 32 matrices 

with invertible determinant, their total contribution to the sum is || = ^. 

Case 2 (det(M — I) = 2 mod 4). 


For all of the matrices with at least one associated vector in the image oi M — I, of which there are 12 in 
H 2 , fM = 5 and I det(M — J )|2 = The total contribution of these matrices is ^ • 4 • ^ ^ = i. 

Case 3 (det(M — 7) = 0 and M — I has at least one odd entry). 

For this case, we use two lemmas of m- First, given a matrix M £ M 2 (Z/ 2 ^Z) where det(M — /) = 0 
and M — I has at least one odd entry, half of the lifts in M 2 (Z/ 2 ^+^Z) have determinant 2^ and half have 
determinant zero. Second, as we used before, if det(M) = 2'’s, with s odd and r < k, “ W- 

will also use the fact that for any lift M' of M — I, fM' = fM- A computation in Magma shows that, for 
the matrices M with at least one associated vector in the image oi M — I, fM = \- 

Thus, for M £ H 2 with det(M — /) = 0 and with M — I having at least one odd entry. 


1 

Xi(M, 2, Vo,o) = ^ X! 

90 n—>-oo 

2=2 


1 


1 11 

4/M|det(M-/)|2^=Jh^5:4.-.- 

i=2 


1 

3’ 


where the sum corresponds to the fact that at level i, of lifts of M have | det(M' — I )\2 = ■ A Magma 

computation shows that there are 12 matrices M £ H 2 that have at least one associated vector in the image 
oi M — I. Therefore, the total contribution from these 12 matrices is 12 • jV • 4 = 

Case 4 (det(M — /) = 0 and M — I has all even entries). 


Lemma 8.4. Suppose M has all even entries, and r > 1. Then 

p{M, r, Vo.o) = (y, r- - 1, . 

Further, when r = 1, p (M, 1, (Z/2Z)^) = (^,0, {0}) . 
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Proof. We have v £ im{M) if and only if | G ini(^). Thus, the numerators of the two limits in 
/r(M, r, Vb,o) and ^ (-^j r — 1, (Z/2’'“^Z)^) are equal, but reducing r by one reduces the denominator of 
/I (^, r — 1, (Z/2''“^Z)^) by 64. The change of the ambient set of vectors then gives the extra factor of four. 
The second case has a factor of ^ because we do not readjust for the ambient set of vectors. □ 

li M — I has all even entries, clearly im(M — /) C Vb,o- Therefore, we need only compute (M — J)/2 for 
M in Ji, since im(M — /) D Vm will be empty for M in all other cosets. For three matrices in Ji, (M — I)/2 
is invertible. For these three, as in the invertible case with r = 2, an analogous computation to Case 1 gives 
fi { ^ 2 ^ , 1, (Z/2Z)^) = |gj;^^(z/2Z)| “ 5- lemma, each contributes to the total sum at level r = 2 an 

amount of /r(M, 2, Vb,o) = ^ Since there are three such matrices, their total 

contribution is ^ • 3 = ^. 

For only one of them (the identity matrix), (M — I)/2 = (qq). In this case, /r(( [j q ), 2, Vd 0) = 
j^/r((0 0),l,(Z/2Z)2) since M — I has all even entries. Now we apply our lemma again: 

M((88),l,(Z/2Z)2) = ^M((8g)>0.{0}) = ^ E m(M,1,(Z/2Z)2). 

MgM2(Z/2Z) 

The last equality comes from the consideration that all matrices at level fc = 1 are lifts of the unique matrix 
modulo 1. Continuing, 

^ m(M,1,(Z/2Z)2) = 1^((88),1,(Z/2Z)2) + 1 ^ ^(M,1,(Z/2Z)2). 

MeM2(Z/2Z) MeM2(Z/2Z), 

^7^(88) 

From here we may solve for our unknown: 

g/r((88 ),l,(Z/2 Z)2) =1 ^ a^(M,1 ,(Z/2 Z)2 ). 

MeM2(Z/2Z), 

0) 

Of the matrices appearing in the right hand side of the above sum, nine have even determinant and at least 
one nonzero entry, and six have odd determinant. Those six contribute ^ as before, and an identical infinite 
sum argument as in case three gives a /r value of ^ for the remaining nine. So /r ((8 8) > 1) (^/2Z)^) = 
||(6-|+9-:j^) = We thus conclude that, at level r = 2, the identity matrix contributes a value of 

16 ■ 42 672- 

Since these four cases partition the elements of H 2 , | + ^ + | + + ^ = M|- This concludes 

our proof of Theorems 11.21 and 11.31 

9. A Family of Elliptic Curves with Arboreal Representation Hk 

In proving the original fact concerning the density of primes dividing the ECHO sequence, we have found 
that for an elliptic curve and rational point with certain conditions, the arboreal representation has image 
conjugate to Hk , the only proper kinetic subgroup of AG'L2(Z/2^Z) (up to conjugacy). These Hk subgroups 
are especially interesting because they only arise from looking at arboreal representations modulo a power 
of 2. In [5], the authors showed that the arboreal representations for primes £ larger than 2 (with similar 
condition that no rational ^division point exists) always surject onto AGL2(Z/€*Z) if the classical Galois 
representations are surjective. We thus ask whether the exceptional subgroups Hk appear as images of the 
arboreal representations for infinitely many pairs {E, P). 

To answer this question, we examine a certain family of elliptic curves to find a parametrization of elliptic 
curves and points that have the same arboreal image as our original curve. Keep in mind the conditions 
that we must show these curves obey: 
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• i?/Q is an elliptic curve with a point P such that P has no rational 2-division point. 

• The classical map pk ■ Gal(i4rfc/Q) —is surjective. 

• The arboreal map : Gal(iirfe/Q) —>■ a1 GL2(^/2^Z) is not surjective. 

We examine the family of curves Ea^b '■ + cLxy + hy = -\- bx^ with the point (0,0). By exercise 3.1 
of Silverman [10], any elliptic curve EjK with a point P € E{K) such that P,2P,3P ^ 0 has an equation 
of the form of Ea,b with P corresponding to (0,0). We will later take E such that P does not have any 
rational 2-division points and such that the classical Galois representation attached to E is surjective. These 
conditions will ensure that P, 2P, 3P ^ 0. 

To find curves with arboreal image equal to Elk, we first construct a surface that parametrizes pairs {E, P) 
with arboreal image contained in Hk (or sufficiently, 1?2)- This result is summarized as follows. 

Lemma 9.1. Let Ea^b/Q. be the elliptic eurve y^ + axy -\- by = x^ -\- bx'^ such that the j-invariant is not 
equal to for some t G Q. Furthermore, let P = (0,0) be on Ea^, K 2 = Q([4“^]P), and 

UJ 2 '■ Gal(i4r2/Q) AGL2(Z/4Z). Then im(a; 2 ) is conjugate to a subgroup of H 2 if and only if the “fabulous” 
polynomial 


fa,b{x) = — 768b^x^ — 204:8{a*b^ a^b^ — 8a^b* -I- 36a&"‘ — 16&^ -I- 816^)x^ 

-b 1048576(a^&® - + Sa'^b^ - 36a6® -b 16&^)x 

-b 262144(-a^°&® -b - 16a®&® -b 72a^6® - 96a®6^ - 55a%^ -b 512a^6^ 

- 256a'‘6® - 1724a'‘6^ -b 896a^6® -b 1272a^6^ - 256a^6® 

- 39840^6® - 256a&® -b 18144a&® - 8256&® - 87486®) 


has a rational root. 

Proof. Regard a and 6 as indeterminates and Po,b as a curve over K = Q(a, b). Let (32 be a 4-division point 
of P; all 4-division points of P have the form P 2 + cAdB of P, where 0 < c, d < 3, and A,B generate 
E[ 4 \ = (Z/4Z)^. For each of the four left cosets C of H2 in AGL 2 (Z/ 4 Z), define 

Cc = ^ cr(x(/32 + A)) • tT(x(/32 + B)) ■ tT(x (/?2 + A -b B)). 

a-ec 

Now for a G Gal(Ar 2 /Q) C AGL 2 (Z/ 4 Z) we have cr(Cc) = faC, and hence the polynomial 

faAx) := J|(x - Cc) 

C 

has coefficients in K. We computed the degree 16 polynomial whose roots are the x-coordinates of the 
4-division points of P and found that the coefficients are in Z[a, 6 ]. This implies that the (c are integral 
over Z[a, 6 ]. Since Z[a, 6 ] is integrally closed in K, the coefficients of fa,b{x) are integral over K and hence 
are in Z[a, 6 ]. 

If we imagine our curve as Ea^b,c '■ 2/^ + axy -b bey = x® -b 6 x^, making the change of variables x i-A s^x and 
y i-A- s®j/, the coefficients rescale as a i-A sa, 6 >-)• .s^b and c >->■ sc. (We say that a and c have weight 1, while 
6 has weight 2.) This shifts the roots of an analogous fa,b,c from (j 1 — >• (since each C has three factors of 
x-coordinates). It follows that the weight of the coefficient of x* in fa,b,c is 24 — 6 i. Specializing to c = 1, we 
have an upper bound on the degree of the coefficients of fa,b- 

To numerically compute fa,b{x), we determine how automorphisms of K2 act on the x-coordinates. Let 
(T G Gal(Ar 2 /Q) and let W 2 (ct) = (u,M) where u is a vector in (Z/4Z) and M G AGL 2 (Z/ 4 Z). Then 



THE DENSITY OF PRIMES 


19 


cr{(32 + cA + dB) = (32 + eA fB where e, / are the vector coordinates computed by the equation 
M 


V. 


We created a function a in Magma that produces the x-coordinate of P 2 + eA + fB based on the input 


c 

d 


by using the periods of E and the elliptic logarithm and elliptic exponential functions. We computed 


fa,b foi' many values of a and b and then determined the coefficients of fa^b as polynomials in a and b using 
linear algebra and the degree bound proven above. 

The discriminant of fa^t is —b^^ Aa^bdio.^ b) with A the discriminant of the curve E^^b and 

g{a, 6 ) = a® + 16a^& - 46a®& + 960 ^ 6 ^ - 3600^6^ + 2560 ^ 6 ^ + 5120^62 - 6720^63 256a6^ + 128&‘‘. 


In fact, g(a,b) defines a curve of genus 0, and this curve is isomorphic to Elliptic curves defined by a 
and b on this bad locus have j-invariant equal to • We do not consider this case, and so we may 

assume that g{a, b) 7 ^ 0. Similarly, or 6 = 0 make Ea^b singular. Thus, we may assume the discriminant 
is non-zero and fa,b has distinct roots. 

Following the argument of [1], we have that cr G Gal(iG 2 /Q) acts on the roots of fa,b by cr(Cc) = Co-c- 
Since the roots are distinct, we have that fa.b has a rational root if and only if for all a G Gal(Ar 2 /Q )5 there 
is a coset C so that aC = C. This is equivalent to the image of 012 being contained in a conjugate of 772 ■ D 


If we consider fa,b(x) as a polynomial in three variables f{x, a, 6 ), then there is a rational curve lying on 
the surface f{x,a,b) = 0 which yields a one-parameter family of curves Ea{t),b(t)- Indeed, the polynomial 
/(—966^, a, h) is a curve of genus 0 with a rational point, which implies that the points on the curve can be 
parametrized. Using Magma, one finds that a parametrization is given by {pi(t) : P 2 {t) '■ Psit))^ where 

pi{t) =it - 25){t + 35)(t^ - 29t + 676)(t^ - lOt - 279f{t^ - 1 - lOt -h 97), 

P 2 (t) =it - 25)(t + 35f(t^ - 29t + 676)^ 

P3(t) ={t^ - lot - 279f{t^ + lot -H 97). 

Thus, rational points on /(—966^, a, b) are of the form (a, b) = pIm) ’ 

Having computed this family, we proceed with the proof of our final theorem, restated here: 

Theorem 1.4. There exists a one-parameter family of curve-point pairs {E,P) such that infinitely many 
pairs in the family have arboreal image conjugate to Et^ ■ In particular, infinitely many pairs (E, P) in our 
family have the property that the density of primes p for which the reduction of P modulo p has odd order is 

179 
336 • 

Proof. We invoke Hilbert’s Irreducibility Theorem to show that the image of the arboreal representation is 
kinetic for curves in our one-parameter family. The conditions for a subgroup to be kinetic, as described 
in Section 6 , are all irreducibility conditions on various polynomials. First, the conditions for surjectivity 
of the classical Galois representation given in [4] are defined by the irreducibility over Q of the 2-torsion 
polynomial, x'^ — At, x'^ -\- At, x^ — 2At, x^ -I- 2A;, and jt 4x^(x -I- 8 ). This irreducibility also ensures that 
the curves are not in the bad locus of our surface, since it can be checked that all curves in the bad locus 
have rational 2-torsion. The second kinetic condition is satisfied if the point (0, 0) is not twice a rational 
point, which is ensured if the 2 -division polynomial of ( 0 , 0 ) is irreducible. 

Now a Magma computation shows that all of these polynomials are irreducible over Q{t) for the At and jt 
associated to our family of curves Et- Hilbert’s Irreducibility Theorem then implies that there are infinitely 
many specializations of t such that all of the required polynomials stay irreducible over Q simultaneously. 
Furthermore, neither the _)-invariant nor the discriminant of our family are constant. We conclude that 
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there are infinitely many non-isomorphic and non-singular elliptic curves in our family that have as im(wfc) 
a kinetic subgroup of AGL2(Z/2^Z). 

Since the image of the arboreal representation is kinetic for infinitely many curves in this family, and every 
rational point on f(x^a,b) = 0 corresponds to a pair (E,P) with arboreal representation contained within 
H 2 , we deduce that these infinitely many curves in fact have image equal to H^. for all k. This concludes the 
proof of Theorem 1.4. 

□ 


Appendix A. A second look at the ECHO sequence 


Recall that the ECHO sequence was itself motivated by finding a sequence whose elliptic curve partner 
has special Galois-theoretic properties. The inspiration behind this first definition (presented in the abstract 
and duplicated here) was to mirror the general form of the Somos-4 sequence that inspired the work of 
Rouse and Jones’ paper. We hence derived an analogous family of curves. However, proceeding in this ad 
hoc manner we have only a clunky definition that gives no hints as to why the sequence is structured the 
way it is; for example, why does this definition have different recurrence relations modulo 3? 

We present here a second definition of the ECHO sequence that is perhaps a little more mathematically 
pleasing, and also gives better insight into the structure of the sequence by providing a more involved recursive 
definition that might make any properties derived from the sequence better explained. Furthermore, to flesh 
out a more whole picture of the sequence, we prove the main result of section [3] using the added flexibility 
of the two equivalent definitions. 

First recall our original definition. 

Definition A.l. We define the ECHO sequence {bn} recursively by (bo, bi, &2, bo) = (1,1, 2,1) and for n > 4, 

f Y' ~ if ^ ^ 0 (mod 3), 

I bn-4 

However, a second look upon our work offered to us by Michael Somos lends us another perspective. 


Definition A.2. Define the ECHO sequence {bn} by 

{bo, bi,b 2 ,bo, 64, bo, bo) = (1,1, 2,1, —3, —7, —17), 
and further recursively for n >7 by 



And again, using the relationship bnbn +7 = — 
ECHO sequence for negative indices. 


n—6^— 1 T 4^n—3 

bn-7 

bn+lbn+0 T fi^n+3^n+4; 


the second definition also defines the 


The flexibility of this new definition is that it need not be concerned with indexing; the use of more 
previous elements of the sequence, while more “restrictive” in some sense, also gives us more ability to 
manipulate coprimality conditions. 

To prove that the definitions are equivalent, recall this lemma from section [3] and consider the following 
derived sequence that will bridge the gap between the two definitions. 

Lemma A.3. For n > 0, define 

ibl_obl + bn-3bl_i + Sbl_ 2 bn-Sbl_ 2 bl_^ if n = 0 (mod 3), 

h{n) = l3bl_obl + bn-3bi_i + bl_ 2 bn-bl_ 2 bl_i if n = 1 (mod 3), 

[bl_ 3 bl + 3 bn- 3 bl_i + bl_ 2 bn - Sbl_. 2 bl-i A n = 2 (mod 3). 
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Then h{n) = 0 for all n € N. 

Definition A. 4. For all n S N, define the sequence dn by dn ■= bnbn +5 — bn+ 2 bn+ 3 - 

We truly mean that {dn} is well-defined for either definition {5„} of the ECHO sequence. However, 
before having proved equality, one may consider there to be two sequences and (i2,n for each definition 
of the ECHO sequence. This is of short lived consequence to us, however, because we directly prove their 
equivalence here. 

Corollary A. 5. For all n S N, bn+rdi^n = &n+idi,n+3- 
Proof. For all /c S N, we hope to show 

bk+idk = bk+idk+3 

^ bkbk+bbk+r + bk+ibk+^bk+e — bk+2bk+3bk+7 — bk+ibk+sbk+s = 0 . 

Again after rewriting this expression with terms bk through bk+i with substitution by our (first) definition, 
factoring with Magma we find that h{k -1-3) = 0 is a factor. And equivalently, bk+ 2 dk = bk-idk +3 as 
desired. □ 


Proposition A. 6 . For all n G N, 6 „+ 7 fi 2 ,n = bn+id 2 ,n+ 3 - 
Proof. By substitution, we seek to show that for n G N, 

bnbn+bbn+r — bnbn+2bn+3 = bn+lbn+sbn+S — bn+lbn+^bn+e- 
By substitutions with our recursive (second) definition, we have the following: 

— bn+lbn+^bn+e — bnbn+2bn+3 = —bn+2bn+3bn+7 — bn+lbn+5bn+6 

— bn+lbn+5bn+6 + 56„+35„_|_46„+5 — 6„5„_|_26„+3 = —bn+2bn+3bn+7 + 56„+36„+45„_|_5 — 6„+i5„_|_55„_|_6 
bn+5{ — bn+lbn+6 + 5fen-|-3^n-|-4) — bnhn+2bn+3 = ^n-l-S (~^n-|-2&n-|-7 + 56„+45„_|_5) — bn+lbn+^bn+Q 
bnbn+5bn+7 ~ bnbn+2bn+3 = bn+lbn+3bn+3 — bn+lbn+bbn+Q- 
Thus, we are done. □ 


We note that both definitions of the ECHO sequence satisfy the equation 

bkbk+5bk+7 + bk+ibk+5bk+6 = bk+2bk+3bk+7 + bk+ibk+3bk+8, 
and since we may compute the first few values, induction shows both definitions produce identical sequences 
as desired. Moreover, this derived sequence {dn} reveals even stronger statements about the ECHO sequence. 


Corollary A. 7. For all n > 1, 


dn 


bn+ibn+4 if n = 0,1 (mods) 
35 „+i6„+4 ifn = 2 (mod 3). 


Proof. Examine first the case n = 0 mod 3. Computationally, d^ = bs^bs — b^^be = (—3)(247) — (—17)(2) = 
—707 = (—7)(101) so the claim is true for n = 3. For the sake of induction, suppose that all n < fc satisfy 
the claim for some k = 0 mod 3. Then 


bk+ibk+4 = dk 

bk+idk+3 

Ofc+lOfc+4 = - - - 

Ok+7 

dk+3 = bk+4bk+7- 


Thus, for all n G N with n = 0 (mod 3), our claim is true by induction. The other two cases modulo 3 are 
identical. □ 
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This is sufficient to see integrality. (The structure of the following proof was inspired by a proof of the 
integrality of the Soinos-5 sequence given in [l4].l 

Proposition A. 8. For n > 3, both bn €and {hmbn-z) = {bmbn- 2 ) = {bn,bn-i) = 1- 


Proof. Proceed by induction. Note that the first 4 terms are 1 , 1 , 2,1 e Z, so the base case is true. 

Suppose for all n < fc + 4 for some k that is integral and the coprime condition is true. Note since 
fc + 1 < fc + 4 that {bk, bk+i) = 1 . By Bezout’s lemma, 3 r, s € Z such that 1 = rbk + sbk+i 6^+5 = 

rbkbk+5 + sbk+ibk+5- 

By the definition of the sequence, for some coefficient ci G { 1 , 3 }, bk+ibk+5 = bk+Abk+2 — ci&^_|_3. By the 
corollary above, 

bkbk+5 — bk+2bk+3 = dk = C2bk+lbk+4: bkbk +5 = C2fofc+l6fe+4 + &fe+2&fe+3 

for some C2 G { 1 , 3 }. Therefore, by the inductive hypothesis we have bk+ibk+5,bkbk+5 G Z, hence bk+5 = 
rbkbk +5 + sbk+ibk +5 € Z as desired. 

To see that bk+5 is coprime to the three terms before it, note that {bk+ibk+4,bk+2bk+3) = 1 because by 
the inductive hypothesis, both bk+i and bk+4 are coprime to hk+2bk+3- Thus, 

( 6 fc+l 6 /c+ 4 , &fc+ 2 ^fc+ 3 ) = 1 
{bk+ibk+ij C2bk+ibk+A + bk+2bk+3) = 1 
{bk+lbk+i^bkbk+ 5 ) = 1. 

Therefore, bk+5 is coprime to bk+A as desired. 

Similarly, bk+ibk+5 = bk+Abk+2 + {— 1 , — 3 } • 6|_|_3 by the first definition, meaning that {bk+ibk+5,bl^^) = 
{bk+Abk+2, ^fe+3) = 1, and so bk+5 is coprime to bk+3 as well. 

Last, bk-2bk+5 = -bk-ibk+A + bbk+ibk+2 by the second definition, meaning that {bk-2bk+5,bk+ibk+2) = 
{bk-ibk+A,bk+ibk+2) = 1, and so bk+5 is coprime to bk+2 as well. 

Therefore, bk+5 is coprime to the previous three terms as desired. □ 


Lastly, knowing that the ECHO sequence is integral, the proof of our main lemma of section[3l lemma [3^ 
follows identically as before. 

Lemma A.9. Define P = (4, 7) on E : + y = — 3x + 4. Then for n > 0, 


{2n + l)P = 


gjn) f{n) 

bl ’ bl 


where g{n) = 26^ — bn- 3 bn+ 3 , and 

(bl + 3b‘l_^bn+2 ifn = 0 (mod 3), 

/(n) = lbl + bl_^bn +2 if n = 1 (mod 3), 

\bl^ + 9bn_j^bn+2 if n = 2 (mod 3). 
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